How severe is CVE-2018-13400?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.7 out of 10.

What type of vulnerability is CVE-2018-13400?

This is classified as CWE-269, which is a common weakness in software security.

CVE-2018-13400 - MEDIUM Severity | CVSS 4.7

Vulnerability Description

Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0 before version 7.12.3, and before version 7.13.1 allow remote attackers who have obtained access to administrator's session to access certain administrative resources without needing to re-authenticate to pass "WebSudo" through an improper access control vulnerability.

Related Vulnerabilities

CVE-2017-13721

MEDIUM

CVSS:4.7(Medium)

In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memo...

CWE-2692017

CVE-2018-19608

MEDIUM

CVSS:4.7(Medium)

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.

CWE-2692018

CVE-2021-29792

MEDIUM

CVSS:4.7(Medium)

IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: ...

CWE-2692021

CVE-2024-26247

MEDIUM

CVSS:4.7(Medium)

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CWE-2692024

CVE-2024-9471

MEDIUM

CVSS:4.7(Medium)

A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key...

CWE-2692024

CVE-2019-4589

MEDIUM

CVSS:4.6(Medium)

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449.

CWE-2692019